Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: r/7SUkF+pc1FofKLfYzEsBPwNewUi2cgiR7Hz6K4+n0=
Subject key identifier: 5D:66:7D:16:E4:66:1B:A9:17:A1:D7:A9:E5:5D:B1:E4:79:15:0E:6A
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 01964EFE97EF53501166C3DD79398066BA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 109A
Signing time: Sat 19 Apr 2025 17:00:29 +0000
Manifest this update: Sat 19 Apr 2025 17:00:29 +0000
Manifest next update: Sun 20 Apr 2025 17:00:29 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: /CyIBbzkUFGwVgH4C+HaWTQX9apdfpTXyBD61z5/kcI=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:97:ef:53:50:11:66:c3:dd:79:39:80:66:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Apr 19 17:00:29 2025 GMT
Not After : Apr 20 17:00:29 2025 GMT
Subject: CN=5d667d16e4661ba917a1d7a9e55db1e479150e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:6e:85:4e:f2:a2:d7:9b:c6:23:dd:0a:21:
32:0a:14:a0:51:fd:74:20:21:fd:e8:fe:9d:d4:77:
b4:7d:69:d3:a0:bf:f1:83:61:e4:98:f3:66:b7:8d:
f1:70:f5:1f:a6:fd:2c:5c:a2:9b:da:ab:76:c7:e4:
c1:49:6e:c6:f6:89:eb:85:c1:0d:3b:1f:63:b2:45:
62:3a:4b:ed:57:33:c8:81:ae:7f:c2:c3:43:34:e7:
66:11:f1:e3:ce:38:54:61:72:30:dc:a5:2f:bc:4a:
2c:0c:4e:e3:f7:15:c0:32:e5:87:42:02:e4:76:ac:
f8:ac:56:9c:b3:f5:0d:0e:cb:24:fa:7d:47:ae:dd:
79:c2:2a:7f:a0:d8:3e:3b:a8:15:cc:f3:4e:1c:fc:
3b:78:f6:89:4c:4b:d1:7a:e3:91:8f:4b:8f:3b:aa:
0c:94:1b:43:cb:ce:fc:a4:a2:db:08:30:56:a2:c7:
e2:b0:d3:84:49:41:22:da:d1:c1:7d:e4:08:07:82:
4b:8f:f5:5b:61:de:6c:0f:1d:5b:eb:f7:5f:c4:67:
e8:3b:7b:78:d1:39:ea:6d:0a:75:ce:4b:ad:ee:4e:
20:3b:55:ad:9f:a2:b2:39:1d:45:e2:20:af:ad:17:
f6:2b:1a:35:fc:da:49:d8:3c:f4:1f:8b:ad:a1:84:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:7D:16:E4:66:1B:A9:17:A1:D7:A9:E5:5D:B1:E4:79:15:0E:6A
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:b1:fd:3b:a8:5e:b1:4a:a1:e4:b3:63:c3:ea:86:3b:76:
15:b1:ac:96:0a:04:73:f1:32:a5:a0:4e:34:b2:e1:b0:e0:aa:
ad:32:23:3d:06:8e:51:92:85:00:b0:7b:49:ee:e1:21:e2:71:
94:27:a1:e0:a6:74:1a:4a:92:4b:ba:1b:c7:b9:5f:5b:bc:40:
61:28:e2:40:82:7c:a1:ab:15:21:43:16:fb:c0:6c:4f:bf:b7:
96:b4:50:95:c0:89:b1:9b:1a:ce:a2:56:6b:36:98:18:b2:a5:
e6:b9:03:a7:3e:16:d5:c1:16:27:fe:90:bc:06:ee:be:9f:95:
40:7a:b9:23:15:bd:1a:f1:65:04:e5:17:0c:3c:69:15:3a:7b:
ff:cd:a1:9b:d2:6b:c3:89:6f:59:0d:45:9e:f2:ae:cc:6b:86:
9f:c8:7c:3b:a6:80:c8:9a:ba:a2:b5:90:06:b6:33:77:bc:8e:
e0:55:e2:f4:f3:cd:c2:38:62:26:68:4d:56:51:c1:28:ae:97:
65:9b:8b:b3:12:5d:ae:c7:71:a6:41:a1:32:9f:a1:b8:79:8f:
05:5a:f1:9e:03:12:0d:29:83:f1:50:47:77:28:9c:0d:5e:99:
c9:d5:70:8f:3d:87:55:15:88:57:a5:ff:11:72:22:aa:b5:9b:
e7:0e:91:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/pfvU1ARZsPdeTmAZrp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2
ZTJmMDgwHhcNMjUwNDE5MTcwMDI5WhcNMjUwNDIwMTcwMDI5WjAzMTEwLwYDVQQD
Eyg1ZDY2N2QxNmU0NjYxYmE5MTdhMWQ3YTllNTVkYjFlNDc5MTUwZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNJuhU7yotebxiPdCiEyChSgUf10
ICH96P6d1He0fWnToL/xg2HkmPNmt43xcPUfpv0sXKKb2qt2x+TBSW7G9onrhcEN
Ox9jskViOkvtVzPIga5/wsNDNOdmEfHjzjhUYXIw3KUvvEosDE7j9xXAMuWHQgLk
dqz4rFacs/UNDssk+n1Hrt15wip/oNg+O6gVzPNOHPw7ePaJTEvReuORj0uPO6oM
lBtDy878pKLbCDBWosfisNOESUEi2tHBfeQIB4JLj/VbYd5sDx1b6/dfxGfoO3t4
0TnqbQp1zkut7k4gO1Wtn6KyOR1F4iCvrRf2Kxo1/NpJ2Dz0H4utoYQt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1mfRbkZhupF6HXqeVdseR5FQ5qMB8GA1UdIwQY
MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt
NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4
LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVax/Tuo
XrFKoeSzY8Pqhjt2FbGslgoEc/EypaBONLLhsOCqrTIjPQaOUZKFALB7Se7hIeJx
lCeh4KZ0GkqSS7obx7lfW7xAYSjiQIJ8oasVIUMW+8BsT7+3lrRQlcCJsZsazqJW
azaYGLKl5rkDpz4W1cEWJ/6QvAbuvp+VQHq5IxW9GvFlBOUXDDxpFTp7/82hm9Jr
w4lvWQ1FnvKuzGuGn8h8O6aAyJq6orWQBrYzd7yO4FXi9PPNwjhiJmhNVlHBKK6X
ZZuLsxJdrsdxpkGhMp+huHmPBVrxngMSDSmD8VBHdyicDV6ZydVwjz2HVRWIV6X/
EXIiqrWb5w6RAw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:46 2025 by rpki-client